Content distribution pipeline watermarking

ABSTRACT

Methods, computer-readable media, and devices for tracking an accessing of a media content via a watermark embedded by a network node are disclosed. For example, a processing system including at least one processor may receive, from a first network node, a first copy of a watermark that is embedded by the first network node in a media content. The processing system may further receive a notification comprising a second copy of the watermark and an identification of a first endpoint device, the notification associated with an accessing of the media content by the first endpoint device, and record the accessing of the media content by the first endpoint device.

The present disclosure relates generally to network-based media contentaccess, and more particularly to devices, non-transitorycomputer-readable media, and methods for tracking an accessing of amedia content via a watermark embedded by a network node.

BRIEF DESCRIPTION OF THE DRAWINGS

The teachings of the present disclosure can be readily understood byconsidering the following detailed description in conjunction with theaccompanying drawings, in which:

FIG. 1 illustrates an example network related to the present disclosure;

FIG. 2 a flowchart of an example method for tracking an accessing of amedia content via a watermark embedded by a network node; and

FIG. 3 illustrates a high level block diagram of a computing devicespecifically programmed to perform the steps, functions, blocks and/oroperations described herein.

To facilitate understanding, identical reference numerals have beenused, where possible, to designate identical elements that are common tothe figures.

DETAILED DESCRIPTION

In one example, the present disclosure describes a method,computer-readable medium, and device for tracking an accessing of amedia content via a watermark embedded by a network node. For instance,in one example, a processing system including at least one processor mayreceive, from a first network node, a first copy of a watermark that isembedded by the first network node in a media content. The processingsystem may further receive a notification comprising a second copy ofthe watermark and an identification of a first endpoint device, thenotification associated with an accessing of the media content by thefirst endpoint device, and record an accessing of the media content bythe first endpoint device.

In particular, examples of the present disclosure provide a system forreal-time watermarking for media contents at nodes in a networkdistribution chain and at endpoint devices for both content accessmanagement and content consumption analytics. For example, anetwork-based controller (e.g., a content management server) may logdevice information of an originating order associated with a watermarkand embed the watermark in the media content. In one example, a last-hopdevice in a telecommunication network may inspect the media contentpassing through the device to detect the watermark and report to thenetwork-based controller. It may then be identified when a new device isaccessing that same watermarked content and billed accordingly or loggedfor piracy tracking. For example, a detected usage of the watermarkedmedia content may be billed by the network-based controller to theviewing device, regardless of the original source of the media contentand/or an originally intended recipient device. In another example, thewatermark may be inspected and the media content blocked from beingforwarded to the destination device if the destination device is notauthorized to receive the media content. In one example, the system maycomprise a content distribution network (CDN) that is trusted with allcontent uploaded to one repository. The content may be watermarked andthe actual usage tracked and billed accordingly.

In one example, multiple devices in a network distribution path mayseparately watermark the same media content so that when the content isviewed and the consumption of the content is reported to the system(e.g., the reporting of the watermarks associated with the content), thenetwork-based controller may be made aware of which copy of a mediacontent an endpoint device has received. For instance, a watermark canbe added at strategic nodes, or a watermark can be modified at strategicnodes to create a trail or path through the network. In addition,watermarks may be read and reported by an endpoint device and/or alast-hop network-based device, e.g., a CDN edge router, to thenetwork-based controller to track when and where the media content isaccessed.

In accordance with the present disclosure, watermarks may be added tomedia content (e.g., audio and/or video) in a non-detectable manner,e.g., non-visible or non-audible way. In one example, the watermarks maycomprise a machine-readable code (e.g., a predefined symbol, image orsound) embedded in the audio and/or video encoding. In one example, thewatermark may identify a source of the media content and/or one or moredevices in a distribution chain of the media content, e.g., where themedia content came from, where the media content is going, when it wastransferred, an intended recipient device, a permitted account, apermitted number of replays, a duration of rental, a geographicrestriction, and so forth. For example only, some predictive videocompression methods may involve the use of reference frames such asIntra-coded frames (I-frames) or Predicted frames (P-frames). The imagesof frames located before and after these reference frames can be derivedbased upon predicted data indicating changes or differences relative tothese reference frames. In one example, the watermarks of the presentdisclosure can be included in one or more of these reference frames. Inone example, watermarking may involve 1 out of every 100 !-frames, 1 outof every 200 I-frames, and so on. For audio content, encoders may embedwatermarks by rearranging several bits of the audio data in a detectablepredefined pattern. Although this type of watermarking may not belossless, its impact can be made relatively small so that they are notgenerally noticeable to listeners of the audio. In addition, if it isnot important to be able to recover the original audio contents,watermarking can also be encoded in delivery stream patterns. Forinstance, packet burst size and/or timing patterns of a delivery of themedia content may comprise a code than can be a watermark.

In one example, a watermark may be stored as a blockchain transaction ina blockchain record. In particular, when a network-based devicewatermarks a given media content, the network-based device may submit arecord of the transaction (the watermarking, and the contents of thewatermark) to a blockchain network for recordation and later use intracking consumption. In one example, the present disclosure may includea centralized network-based controller that maintains a blockchainledger for tracking and verifying distribution and consumption ofvarious media contents. In one example, network-based devices that areinvolved in watermarking media content may also maintain blockchainledgers for tracking and verifying distribution and consumption.Alternatively, or in addition, other devices (e.g., mining devices) maybe involved in the creation of blockchain records for transactions thatare submitted by other devices. For instance, dedicated mining devicesmay create blockchain records and submit completed records to otherdevices in the blockchain network, but may not be engaged in thewatermarking and distribution of media content. In one example, theblockchain ledgers may be associated with a global public blockchainnetwork. In another example, the blockchain network may be a privateblockchain network maintained by a particular network service providerand/or the network service provider and one or more trusted partners(such as content creators, owners, distributors, licensors, etc.).

In one example, the system may comprise a CDN that does not utilizeencryption across networks so that packets can be viewed as video,audio, and/or images and watermarks can be detected at CDN nodes.Alternatively, in one example, a CDN node (e.g., a CDN edge server) mayauthenticate on behalf of an endpoint device to decrypt packets andcheck for watermarks in media content. For example, a network of thepresent disclosure may be trusted so that protected content no longerneeds to be encrypted across the network. Rather, the network watermarkscontent, tracks usage, and charges for the usage/consumption of thecontent appropriately on behalf of the content creators and/or contentowners. In another example, a content source may provide media contentfor transport across the network in an encrypted format. In such anexample, the network may be given trusted access into the encryptionprotocol, or partial access, e.g., ability to only decrypt a portion ofthe content containing the watermark, e.g., a particular location of animage, e.g., an upper left corner of the image, an upper right corner ofthe image, a lower left corner of the image, a lower right corner of theimage, and so on.

Examples of the present disclosure may provide a decrease in piracy andbetter identification of sources of piracy (both from endpoint devicesand within network/distribution flows). For instance, the notificationof accessing of watermarked media content may indicate that that thereare a number of copies of a same media content in distribution, but thatone particular copy is being the most heavily consumed. Thus, it may beconcluded that a particular copy is the primary source of piracy and canbe traced back to a particular device, a particular distribution chainor a particular geographic origin, and so forth. In one example, thenetwork service provider may present challenges for a user to accessmedia content in an unauthorized way. For example, if a media contentdoes not contain watermarks, or if the watermark(s) indicates that theaccessing device and/or user is not authorized, the network serviceprovider can cause a notification to be placed across the displayedmedia content indicating that it is detected that the user did not payfor the media content, or the device and/or user is not authorized toview the video. In addition, it can be made unprofitable for a piracysite to operate because a user can be detected to be accessing mediacontent (regardless of how it comes to the user) and charged for it. Ifthe user is charged all the same whether it comes from an authorized CDNor a piracy site, the piracy site does not offer a lesser cost to theuser, while carrying the deterrent of being an unauthorized source.

In addition, logging of usage locations of watermarks and associateduser metadata provides a revenue stream to content creators becausebilling could be derived from usage metrics. For example, alternativebilling methodologies may be associated with the same media contentdepending upon whether the media content is actually consumed or remainsunused, the time or place of playback, the type of playback platform,whether the media content is played on a different device than thedevice that downloaded the media content, and so forth. In one example,multiple endpoint devices may be registered to an account (e.g., afamily account), and permitted to access the same media content. Forinstance, sharing may be allowed on up to five devices and so on.

In one example, a user may be watching a video program at a neighbor'shouse. The user may request and download the video program from thenetwork using his or her family account, but may then play the videoprogram on the neighbor's television. In one example, the downloading tothe neighbor's device(s) may be detected and the network serviceprovider may offer to the user and/or the neighbor to incur anadditional charge for increasing the scope of authorized use to includethe one time use. The network service provider may then allow or denythe playback of the video program according to the selection. In oneexample, the user may be allowed to stop an action that is a violation(e.g., someone attempting to use the user's account without knowledge ofthe user). Alternatively, or in addition, the user may be offered toswitch access rights to the video program, e.g., forfeit the user'saccess rights and transfer to the neighbor. In still other examples, amessage may be sent to the user to confirm that the neighbor did notsteal the user's device, the neighbor may be invited to obtain aseparate subscription or license, and so forth.

The specific actions of the network service provider may depend uponwhether the endpoint device is able to check for watermarks and toreport the watermarks to the network service provider, or whether thenetwork service provider is relying upon network edge devices to checkfor watermarks in media content transiting the network for intendedendpoint devices. In one example, watermarks may also be used to trackaccessing of specific portions of the media content. For instance, for astreaming video program, a network edge device may access watermarksfrom the first 30 minutes of the video program and report the accessingof the watermarks to the centralized processing system. However, theuser may cease watching the video program. The network edge device maytherefore not report further watermarks from the remainder of the videoprogram. The centralized system may detect that only half of the videoprogram is watched and could record a partial charge instead of a fullcharge for the entire video program. For instance, the network serviceprovider may adjust the price based upon how much a particular mediacontent is being consumed, e.g., over multiple copies, for a singlecopy, for family copies derived from a particular source copy (e.g.,traceable via a blockchain-based watermark), and so forth. These andother aspects of the present disclosure are described in greater detailbelow in connection with the examples of FIGS. 1-3.

To better understand the present disclosure, FIG. 1 illustrates anexample network 100, related to the present disclosure. As shown in FIG.1, the network 100 connects mobile devices 157A, 157B, 167A and 167B,home network devices such as home gateway 161, set-top boxes (STBs) 162Aand 162B, television (TV) 163A and TV 163B, home phone 164, router 165,and personal computer (PC) 166, other devices, such as device 191, andso forth, with one another and with various other devices via a corenetwork 110, a wireless access network 150 (e.g., a cellular network),an access network 120, an access network 125, other networks 140,content distribution network (CDN) 170, and/or the Internet in general.For instance, connections between core network 110, access network 120,access network 125, home network 160, CDN 170, wireless access network150 and other networks 140 may comprise the Internet in general,internal links under the control of single telecommunication serviceprovider network, links between peer networks, and so forth.

In one example, wireless access network 150 may comprise a radio accessnetwork implementing such technologies as: Global System for MobileCommunication (GSM), e.g., a Base Station Subsystem (BSS), or IS-95, aUniversal Mobile Telecommunications System (UMTS) network employingWideband Code Division Multiple Access (WCDMA), or a CDMA3000 network,among others. In other words, wireless access network 150 may comprisean access network in accordance with any “second generation” (2G),“third generation” (3G), “fourth generation” (4G), Long Term Evolution(LTE), “fifth generation” (5G) or any other yet to be developed futurewireless/cellular network technology. While the present disclosure isnot limited to any particular type of wireless access network, in theillustrative example, wireless access network 150 is shown as a UMTSterrestrial radio access network (UTRAN) subsystem. Thus, elements 152and 153 may each comprise a Node B or evolved Node B (eNodeB). In oneexample, wireless access network 150 may be controlled and/or operatedby a same entity as core network 110.

In one example, each of the mobile devices 157A, 157B, 167A, and 167Bmay comprise any subscriber/customer endpoint device configured forwireless communication such as a laptop computer, a Wi-Fi device, aPersonal Digital Assistant (PDA), a mobile phone, a smartphone, an emaildevice, a computing tablet, a messaging device, and the like. In oneexample, any one or more of mobile devices 157A, 157B, 167A, and 167Bmay have both cellular and non-cellular access capabilities and mayfurther have wired communication and networking capabilities.

As illustrated in FIG. 1, network 100 includes a core network 110. Inone example, core network 110 may combine core network components of acellular network with components of a triple play service network; wheretriple play services include telephone services, Internet services andtelevision services to subscribers. For example, core network 110 mayfunctionally comprise a fixed mobile convergence (FMC) network, e.g., anIP Multimedia Subsystem (IMS) network. In addition, core network 110 mayfunctionally comprise a telephony network, e.g., an InternetProtocol/Multi-Protocol Label Switching (IP/MPLS) backbone networkutilizing Session Initiation Protocol (SIP) for circuit-switched andVoice over Internet Protocol (VoIP) telephony services. Core network 110may also further comprise a broadcast television network, e.g., atraditional cable provider network or an Internet Protocol Television(IPTV) network, as well as an Internet Service Provider (ISP) network.The network elements 111A-111D may serve as gateway servers or edgerouters to interconnect the core network 110 with other networks 140,wireless access network 150, access network 120, access network 125,content distribution network (CDN) 170, and so forth. As shown in FIG.1, core network 110 may also include a plurality of television (TV)servers 112, and a plurality of application servers 114. For ease ofillustration, various additional elements of core network 110 areomitted from FIG. 1.

With respect to television service provider functions, core network 110may include one or more television servers 112 for the delivery oftelevision content, e.g., a broadcast server, a cable head-end, and soforth. For example, core network 110 may comprise a video super huboffice, a video hub office and/or a service office/central office. Inthis regard, television servers 112 may include content server(s) tostore scheduled television broadcast content for a number of televisionchannels, video-on-demand (VoD) programming, local programming content,and so forth. Alternatively, or in addition, content providers maystream various contents to the core network 110 for distribution tovarious subscribers, e.g., for live content, such as news programming,sporting events, and the like. Television servers 112 may also includeadvertising server(s) to store a number of advertisements that can beselected for presentation to viewers, e.g., in the home network 160 andat other downstream viewing locations. For example, advertisers mayupload various advertising content to the core network 110 to bedistributed to various viewers. Television servers 112 may also includeinteractive TV/video-on-demand (VoD) server(s), as described in greaterdetail below.

In one example, the access network 120 may comprise a Digital SubscriberLine (DSL) network, a broadband cable access network, a Local AreaNetwork (LAN), a cellular or wireless access network, a 3^(rd) partynetwork, and the like. For example, the operator of core network 110 mayprovide a cable television service, an IPTV service, or any other typesof television service to subscribers via access network 120. In thisregard, access network 120 may include a node 122, e.g., a mini-fibernode (MFN), a video-ready access device (VRAD) or the like. However, inanother example, node 122 may be omitted, e.g., forfiber-to-the-premises (FTTP) installations. Access network 120 may alsotransmit and receive communications between home network 160 and corenetwork 110 relating to voice telephone calls, communications with webservers via other networks 140, content distribution network (CDN) 170and/or the Internet in general, and so forth. In another example, accessnetwork 120 may be operated by a different entity from core network 110,e.g., an Internet service provider (ISP) network.

In one example, home network 160 may receive television services viasatellite broadcast. For instance, ground station 130 may receivetelevision content from television servers 112 for uplink transmissionto satellite 135. Accordingly, satellite 135 may receive televisioncontent from ground station 130 and may broadcast the television contentto satellite receiver 139, e.g., a satellite link terrestrial antenna(including satellite dishes and antennas for downlink communications, orfor both downlink and uplink communications), as well as to satellitereceivers of other subscribers within a coverage area of satellite 135.In one example, satellite 135 may be controlled and/or operated by asame network service provider as the core network 110. In anotherexample, satellite 135 may be controlled and/or operated by a differententity and may carry television broadcast signals on behalf of the corenetwork 110.

As illustrated in FIG. 1, core network 110 may include variousapplication servers 114. For instance, application servers 114 may beimplemented to provide certain functions or features, e.g., aServing-Call Session Control Function (S-CSCF), a Proxy-Call SessionControl Function (P-CSCF), or an Interrogating-Call Session ControlFunction (I-CSCF), one or more billing servers for billing one or moreservices, including cellular data and telephony services, wire-linephone services, Internet access services, and television services.Application servers 114 may also include a Home Subscriber Server/HomeLocation Register (HSS/HLR) for tracking cellular subscriber devicelocation and other functions. An HSS refers to a network elementresiding in the control plane of an IMS network that acts as a centralrepository of all customer specific authorizations, service profiles,preferences, etc. Application servers 114 may also include an IMS mediaserver (MS) for handling and terminating media streams to provideservices such as announcements, bridges, and Interactive Voice Response(IVR) messages for VoIP and cellular service applications. The MS mayalso interact with customers for media session management. In addition,application servers 114 may also include a presence server, e.g., fordetecting a presence of a user. For example, the presence server maydetermine the physical location of a user or whether the user is“present” for the purpose of a subscribed service, e.g., online for achatting service and the like.

In one example, application servers 114 may include a content managementserver configured to receive and store watermarks regarding variousmedia content, to verify authorization of various devices to accessmedia content, to take actions in response to such verifications, and soforth. For instance, at least one of application servers 114 maycomprise all or a portion of a computing device or system, such ascomputing system 300, and/or processing system 302 as described inconnection with FIG. 3 below, specifically configured to perform varioussteps, functions, and/or operations for tracking an accessing of a mediacontent via a watermark embedded by a network node, as described herein.It should be noted that the foregoing are only several examples of thetypes of relevant application servers 114 that may be included in corenetwork 110 for storing information relevant to providing variousservices to subscribers.

In addition, it should be noted that as used herein, the terms“configure,” and “reconfigure” may refer to programming or loading aprocessing system with computer-readable/computer-executableinstructions, code, and/or programs, e.g., in a distributed ornon-distributed memory, which when executed by a processor, orprocessors, of the processing system within a same device or withindistributed devices, may cause the processing system to perform variousfunctions. Such terms may also encompass providing variables, datavalues, tables, objects, or other data structures or the like which maycause a processing system executing computer-readable instructions,code, and/or programs to function differently depending upon the valuesof the variables or other data structures that are provided. As referredto herein a “processing system” may comprise a computing deviceincluding one or more processors, or cores (e.g., as illustrated in FIG.3 and discussed below) or multiple computing devices collectivelyconfigured to perform various steps, functions, and/or operations inaccordance with the present disclosure.

In one example, home network 160 may include a home gateway 161, whichreceives data/communications associated with different types of media,e.g., television, phone, and Internet, and separates thesecommunications for the appropriate devices. The data/communications maybe received via access network 120 and/or via satellite receiver 139,for instance. In one example, television data is forwarded to set-topboxes (STBs)/digital video recorders (DVRs) 162A and 162B to be decoded,recorded, and/or forwarded to television (TV) 163A and TV 163B forpresentation. Similarly, telephone data is sent to and received fromhome phone 164; Internet communications are sent to and received fromrouter 165, which may be capable of both wired and/or wirelesscommunication. In turn, router 165 receives data from and sends data tothe appropriate devices, e.g., personal computer (PC) 166, mobiledevices 167A, and 167B, and so forth. In one example, router 165 mayfurther communicate with TV (broadly a display) 163A and/or 163B, e.g.,where one or both of the televisions is a smart TV. In one example,router 165 may comprise a wired Ethernet router and/or an Institute forElectrical and Electronics Engineers (IEEE) 802.11 (Wi-Fi) router, andmay communicate with respective devices in home network 160 via wiredand/or wireless connections.

In one example, one or both of the STB/DVR 162A and STB/DVR 162B maycomprise all or a portion of a computing device or system, such ascomputing system 300, and/or processing system 302 as described inconnection with FIG. 3 below, specifically configured to perform varioussteps, functions, and/or operations in connection with tracking anaccessing of a media content via a watermark embedded by a network node,as described herein. Among other functions, STB/DVR 162A and STB/DVR162B may comprise video players capable of playing video programs informats such as Moving Picture Expert Group (MPEG) .mpeg files, .movfiles, .mp4 files, 0.3gp files, .f4f files, .m3u8 files, or the like.Although STB/DVR 162A and STB/DVR 162B are illustrated and described asintegrated devices with both STB and DVR functions, in other, further,and different examples, STB/DVR 162A and/or STB/DVR 162B may compriseseparate STB and DVR devices. It should be noted that other devices,such as one or more of mobile devices 157A, 157B, 167A and 167B, and/orPC 166 may also comprise video players and/or audio players capable ofplaying video and/or audio programs in various formats.

In accordance with the present disclosure, other networks 140 andservers 149 may comprise networks and devices of various contentproviders, e.g., of video and/or audio programming, images, documents,and so forth. In addition, in one example, access network 125 may be thesame as or similar to access network 120, e.g., a Digital SubscriberLine (DSL) network, a broadband cable access network, a Local AreaNetwork (LAN), a cellular or wireless access network, a 3^(rd) partynetwork, and the like. For instance, access network 125 may transmit andreceive communications between device 191 and core network 110 relatingto voice telephone calls, communications with web servers via othernetworks 140, content distribution network (CDN) 170 and/or the Internetin general, and so forth. Device 191 may represent a smart TV, aset-top-box (STB) and/or a digital video recorder (DVR), a PC, a laptopcomputer, a mobile device such as a smartphone or a computing tablet,and so forth. In various examples, access network 125 may be operated bya same or a different entity from core network 110, e.g., an Internetservice provider (ISP) network. In addition, access network 125 may beoperated by a same or a different entity from access network 120.

Network 100 may also include a content distribution network (CDN) 170.In one example, CDN 170 may be operated by a different entity from corenetwork 110. In another example, CDN 170 may be operated by a sameentity as core network 110, e.g., a telecommunication service provider.In one example, the CDN 170 may comprise a collection of cache serversdistributed across a large geographical area and organized in a tierstructure. The first tier may comprise a group of servers that accesscontent web servers (origin servers) to pull content into the CDN 170,referred to as an ingestion servers, e.g., ingest server 172. Thecontent may include video programs, audio programs, content of variouswebpages, electronic documents, video games, etc. A last tier maycomprise cache servers which deliver content to end user, referred to asedge caches, or edge servers, e.g., edge server 174. For ease ofillustration, a single ingest server 172 and two edge servers 174 and175 are shown in FIG. 1. In between the ingest server 172 and edgeservers 174 and 175, there may be several layers of servers (omittedfrom the illustrations), referred to as the middle tier. In one example,either or both of the edge servers 174 and 175 may be multi-tenant,serving multiple content providers, such as core network 110, contentproviders associated with server(s) 149 in other network(s) 140, and soforth. In addition, in one example, edge server 174 and/or edge sever175 may comprise all or a portion of a computing device or system, suchas computing system 300, and/or processing system 302 as described inconnection with FIG. 3 below, specifically configured to perform varioussteps, functions, and/or operations for tracking an accessing of a mediacontent via a watermark embedded by a network node, in accordance withthe present disclosure.

In accordance with the present disclosure various devices may beinvolved in the distribution and tracking of access to various mediacontent. For instance, other networks 140 and servers 149 may comprisenetworks and devices of various content providers, e.g., of video and/oraudio programming, images, documents, and so forth. In one example,media content, e.g., video content, from servers 149 may be provided toTV servers 112 in core network 110, e.g., for television broadcast, VoDstreaming, IPTV streaming, cellular streaming or cellular download, andso forth. For example, as discussed above, television servers 112 mayinclude content server(s) to store scheduled television broadcastcontent for a number of television channels, video-on-demand (VoD)programming, local programming content, and so forth. In addition,television servers 112 may include a broadcast server, a cable head-end,and so forth which may broadcast or otherwise transmit the mediacontent, e.g., via access network 120, access network 125, and/or CDN170, via satellite broadcast by satellite 135, and so forth.Alternatively, or in addition, media content may be obtained by endusers without the involvement of core network 110. For instance, servers149 may comprise web servers/media caches that provide media contents toCDN 170 via ingest server 172. In turn, the media contents may bedistributed to various end users, such as device 191 via access network125, PC 166 via access network 120, home gateway 161, etc.

In accordance with the present disclosure, various devices illustratedin FIG. 1 may embed watermarks in media contents, may report thewatermarking of media contents, may read watermarks from media contents,may modify watermarks in media contents, may report the accessing ofmedia contents containing various watermarks, and so forth. As just oneexample, a user may order a video program from core network 110 viaSTB/DVR 162A. The video program may be watermarked by one of the TVservers 112, and the watermarking may be reported to a contentmanagement server, e.g., one of the application servers 114. In oneexample, the video program may also be watermarked by NE 111A on-routeto the STB/DVR 162A via the access network 120, and the watermarkingreported to the content management server. In one example, the STB/DVR162A may play the video program on TV 163A. In addition, STB/DVR 162Amay read the watermarks embedded in the video program and report theaccessing of the media content to the content management server. Inparticular, STB/DVR 162A may report the watermarks as they areencountered in the video program. At a later time later, the contentmanagement server may receive a notification of the accessing of a samecopy of the video program by device 191. For instance, device 191 mayreport the watermarks contained in the video program as they areencountered. Alternatively, or in addition, NE 111C and/or edge server175 may report the accessing of the video program by device 191.

To illustrate, device 191 may request the video program from one of theservers 149 (e.g., a web server), and the video program may be streamedvia core network 110 and/or CDN 170, and access network 125. Thelast-hop devices may inspect the video program, extract the watermarks,and report to the content management server that the video programcontaining the watermarks is being sent to the device 191. With thisinformation, the content management server may determine that device 191is accessing the same copy of the video program as previously sent toSTB/DVR 162A. In addition, the content management server may determinethat device 191 is not authorized to access this copy of the videoprogram, and that the source of the video program (e.g., one of servers149) may be hosting a pirated copy of the video program. Moreover, thecontent management server may determine that the pirated copy of thevideo program is in fact the copy that was originally sent to STB/DVR162A. Thus, STB/DVR 162A may be considered as an initial source of thepirated copy.

For instance, one possibility is that a user associated with STB/DVR162A may have copied the video program and uploaded the copy to the oneof the servers 149. Alternatively, another entity may have accessed andcopied the video program from STB/DVR 162A. Still another possibility isthat a user associated with STB/DVR 162A may have permissibly copied thevideo program, e.g., downloaded to PC 166, mobile device 167A, etc. fromwhich the copy of the video program may have later been stolen. Forinstance, the user may have lost mobile device 167A and someone findingthe device 167A may have gained access to the video program and uploadeda copy to one of the servers 149.

In all of these scenarios, it is still valuable to be able to identifythe version of the video program sent from one of the TV servers 112 toSTB/DVR 162A as the source of the unlicensed copy that appears to havebeen made available from the one of the servers 149 and accessed bydevice 191. In addition, an account associated with device 191 may beappropriately charged for viewing the video program by the contentmanagement server and/or core network 110, e.g., where device 191 isalso a device of a subscriber. In this way, the user may beappropriately charged for the viewing of the video program and the feesmay be shared with the content owner, creator, and/or distributor,regardless of whether the content is obtained from an officiallylicensed source (e.g., core network 110 via TV servers 112), or anunlicensed source (e.g., one of the servers 149).

It should be noted that in some cases, an intended endpoint device of amedia content may self-report the accessing of the media content.However, in cases where the intended endpoint device cannot or does notreport the accessing of the media content, the reporting by the last-hopnetwork devices may be used to track the accessing of the media contentsby the respective endpoint devices with sufficient accuracy. Inparticular, the last-hop network devices may access the watermarks inthe media content and report that a media content containing thewatermarks is being sent to a particular endpoint device. The contentmanagement server may compare the watermarks in the media content towatermarks stored in a database and determine whether the intendedendpoint device is an authorized recipient, whether the copy of themedia content is authorized for distribution via the path taken throughthe reporting last-hop network element, and so forth.

In another example, an endpoint device and/or a last-hop network elementmay report to the content management server the accessing of a mediacontent that is not watermarked. In such case, the content managementserver may determine that the copy of the media content is notlegitimate and may further report the source of the media content foradditional investigation. The content management server may also recordthe accessing of the media content by the endpoint device to makeappropriate charges to an account associated with the endpoint deviceand to give an appropriate credit to the media content owner, creator,and/or distributor.

In one example, a plurality of devices in the network 100 may comprise ablockchain network. In one example, network-based devices that areinvolved in watermarking media content may also comprise blockchainnodes. Blockchain nodes may also comprise devices that are not involvedin watermarking media content, not involved in reading and reportingwatermarks from media content, and so forth. For instance, some or allof the blockchain nodes may comprise standalone devices (e.g., dedicatedto creating blockchain records, or “mining”). The blockchain nodes maymaintain blockchain ledgers recording blockchain records. In accordancewith the present disclosure, the blockchain records may includeblockchain transactions for tracking and verifying distribution andconsumption of various media contents. For instance, a network nodeadding a watermark to a media content may submit the information of thewatermark to the blockchain network as a blockchain transaction. Theblockchain transaction (e.g., the watermark) may indicate that the mediacontent has been received by the first network node from one or moreother network-based devices and is being sent to one or more intendedendpoint devices. Devices in the blockchain network may then include thewatermark in a next blockchain record, in one of the next severalblockchain records to be created, etc. The device generating theblockchain record may then provide the blockchain record to otherdevices in the blockchain network for recordation in respectiveblockchain ledgers. In accordance with the present disclosure, theblockchain network may include the content management server, e.g., oneof application servers 114 that receives watermarks, compares watermarksto watermarks stored in a database, detects whether authorized orunauthorized devices are accessing media content, identifies certaincopies of media content and pirated copies, and so forth. In particular,the watermarks in the database records of the content management servermay be stored in the blockchain ledger, or may be stored in a differentformat, but verified via the blockchain records of the blockchainledger.

In one example, the blockchain network may comprise a global publicblockchain network. Thus, for example, blockchain nodes may includeservers 149 in other networks, application servers 114 in core network110, NEs 111A-111D, and/or edge servers 174 and 175, and so forth. Inanother example, the blockchain network may be a private blockchainnetwork maintained by a particular network service provider (e.g., anetwork service provider operating core network 110 and/or CDN 170),and/or the network service provider with one or more trusted partners(such as content creators, owners, distributors, licensors, etc.).

Further details regarding the functions that may be implemented by edgeservers 174 and 175, ingest server 172, NEs 111-111D, TV servers 112,application servers 114, servers 149, STBs/DVRs 162A and 162B, mobiledevices 157A, 157B, 167A and 167B, and/or PC 166, device 191, and soforth are discussed in greater detail below in connection with theexample of FIG. 2. In addition, those skilled in the art will realizethat the network 100 may be implemented in a different form than thatwhich is illustrated in FIG. 1, or may be expanded by includingadditional endpoint devices, access networks, network elements,application servers, etc. without altering the scope of the presentdisclosure. For example, core network 110 is not limited to an IMSnetwork. Wireless access network 150 is not limited to a UMTS/UTRANconfiguration. Similarly, the present disclosure is not limited to anIP/MPLS network for VoIP telephony services, or any particular type ofbroadcast television network for providing television services, and soforth.

FIG. 2 illustrates a flowchart of a method 200 for tracking an accessingof a media content via a watermark embedded by a network node, inaccordance with the present disclosure. In one example, the method 200is performed by a network-based device, such as one of the applicationservers 114, or any one more components thereof, such as a processingsystem, or by one of these devices in conjunction with other devicesand/or components of network 100 of FIG. 1, e.g., other applicationservers 114, NEs 111A-111D, edge servers 174 and 175, and so forth. Inone example, the steps, functions, or operations of method 200 may beperformed by a computing device or system 300, and/or a processingsystem 302 as described in connection with FIG. 3 below. For instance,the computing device 300 may represent any one or more components of acontent management server and/or one or more other devices that is/areconfigured to perform the steps, functions and/or operations of themethod 200. For illustrative purposes, the method 200 is described ingreater detail below in connection with an example performed by aprocessing system, such as processing system 202. The method 200 beginsin step 205 and proceeds to step 210.

At step 210, the processing system receives, from a first network node,a first copy of a watermark. In particular, in accordance with thepresent disclosure the watermark is embedded by the first network nodein a media content and is reported to the processing system. The firstnetwork node may comprise, for example, an edge server, or last-hopnetwork-based device, such as a CDN edge server, in a distribution pathof the media content. However, it should be noted that not all networkdevices may be configured to add and/or read watermarks in mediacontent. Accordingly, the first network node may be a last device in adistribution chain of the media content that is configured to readand/or write watermarks in accordance with the present disclosure. Inone example, the watermark identifies the network node. In one example,the watermark further identifies at least one endpoint device that isauthorized to access the media content. The watermark may furtherinclude information such as where the media content came from, where themedia content is going, when it was transferred, a permitted account, apermitted number of replays, a duration of rental, a geographicrestriction, and so forth.

In one example, the watermark is encoded in the media content by thefirst network node before sending the media content to at least oneintended endpoint device. In addition, in one example, the first copy ofthe watermark may be recorded in a blockchain record before and/or afterbeing received by the processing system. For instance, the first networknode may submit the information of the watermark to a blockchain networkas a blockchain transaction. The blockchain transaction (e.g., thewatermark) may indicate that the media content has been received by thefirst network node from one or more other network-based devices and isbeing sent to one or more intended endpoint devices. Devices in theblockchain network may then include the watermark in a next blockchainrecord, in one of the next several blockchain records to be created,etc. The device generating the blockchain record may then provide theblockchain record to other devices in the blockchain network forrecordation in respective blockchain ledgers, where the blockchainnetwork includes the processing system. In other words, the processingsystem may store a copy of the watermark as a blockchain record.

In one example, the processing system may have previously encoded, e.g.,embedded, another watermark to the media content. In another example,the watermark encoded in the media content by the first network node maycomprise a modified and/or updated version of a watermark that haspreviously been encoded into the media content by the processing systemand/or another network-based device. To illustrate, the processingsystem may store one or more database records for the media contentwhich may store information regarding at least one endpoint device thatis authorized to access the media content, where the media content camefrom, where the media content is going, when it was transferred, apermitted account, a permitted number of replays, a duration of rental,a geographic restriction, and so forth. In one example, the storedinformation may also be stored in a blockchain record by the processingsystem and/or a number of additional devices in a blockchain network.For instance, the processing system may have submitted informationrelating to the sending of the media content in a different blockchaintransaction. In one example, the processing system may also storedatabase records regarding user accounts, various endpoint devicesassociated with the user accounts, media contents that are permitted tobe accessed in connection with the user accounts, and so forth. In oneexample, the first copy of the watermark received from the first networknode may be compared against this stored information to determine thatthe media content is on a permitted and/or an intended distributionpath, is being sent to a permitted destination, and so forth.

At step 215, the processing system receives a notification comprising asecond copy of the watermark and an identification of a first endpointdevice. In particular, the notification is associated with an accessingof the media content by the first endpoint device. For instance, thefirst endpoint device may be accessing the media content (e.g., playinga video or audio program via a display screen and/or a speaker), and mayread the watermark that is encoded therein and report the watermark(e.g., the “second copy” of the watermark) to the processing system.Alternatively, or in addition, another device in a local networkassociated with the endpoint device, and/or a network edge server maydetect that the media content is passing through such device to thefirst endpoint device, may read the watermark encoded therein, and mayreport the watermark (e.g., the “second copy” of the watermark) to theprocessing system along with the identification of the first endpointdevice. The reporting may also indicate an identity of the network edgeserver or other reporting devices, a location, a time of the mediacontent and/or the watermark being detected at such a device, and soforth.

In one example, the first endpoint device or another device that isreporting the second copy of the watermark may also update the watermarkin the media content or add one or more additional watermarks to themedia content. For instance, a watermark may also be used to track howmany times a video program has been watched and on which device(s).Thus, the watermark may indicate that a particular copy of the videoprogram has been watched on the first endpoint device. However, thewatermark may also record that the copy of the video program haspreviously been watched on another endpoint device. In one example, thenotification comprising a second copy of the watermark and anidentification of a first endpoint device may be in the form of ablockchain transaction that is submitted to a blockchain network forrecordation in a blockchain record.

At step 220, the processing system records an accessing of the mediacontent by the first endpoint device. For instance, if the notificationof the accessing of the media content by the first endpoint devicecomprises a blockchain record, step 220 may comprise the processingsystem recording the blockchain record in a blockchain ledger maintainedby the processing system. In one example, watermark updates (oradditional watermark(s)) related to multiple accesses of the same copyof the media content may be further recorded in one or more blockchainrecords. In particular, the processing system may verify the number oftimes that a particular copy of a media content has been accessed.

At step 225, the processing system may optionally determine the firstendpoint device is not authorized to access the media content. Forexample, the processing system may utilize a blockchain ledger to verifyvarious transactions relating to a media content and/or particularcopies of a media content. As discussed above, the processing system mayalso maintain database records relating to the media content and/or anaccount associated with the first endpoint device. Thus, the blockchainrecord may be used to verify the contents of the database record(s). Insuch an example, the processing system may access the database record(s)to compare the notification, which identifies a particular copy of themedia content and the first endpoint device, to stored informationregarding the authorization (or lack thereof) of the first endpointdevice to access the media content.

In one example, the first endpoint device may not be authorized toaccess the media content when the first endpoint device was not anintended endpoint device (i.e., an intended recipient) of a particularcopy of the media content. For instance, the first copy of the watermarkmay indicate that the media content was being sent from the firstnetwork device to a second endpoint device. However, the media contentmay have been copied from the second endpoint device to the firstendpoint device, may have been uploaded by the second endpoint device toa media sharing website from which the media content is downloaded bythe first endpoint device, and so forth. In any number of differentways, the first endpoint device may have come to access the first mediacontent without prior authorization. Nevertheless, the tracking of thesecond copy of the watermark and the comparing to the first copy of thewatermark may detect that the first endpoint device is not authorized toaccess that particular copy of the media content.

At step 230, the processing system may optionally record a charge to anaccount associated with the first endpoint device. For instance, at step225 the processing system may determine that the first endpoint deviceis not authorized to access the media content, or is permitted to accessthe media content, but has not yet paid for that access. Thus, theprocessing system may automatically record the charge to the accountassociated with the first endpoint device.

At step 235, the processing system may optionally grant an authorizationto the first endpoint device to access the media content. In particular,the processing system may automatically charge the account associatedwith the first endpoint device at step 230 and then allow the access atstep 235. In one example, any database records relating to the mediacontent and/or the account associated with the first endpoint device maybe updated to indicate that the first endpoint device (and in oneexample, other endpoint devices associated with the account) may nowaccess the media content.

At step 240, the processing system may optionally receive a plurality ofnotifications comprising additional copies of the watermark andidentifications of a plurality of endpoint devices, wherein thenotifications are associated with an accessing of the media content bythe plurality of endpoint devices. For instance, step 240 may comprisethe same or similar operations as described above in connection withstep 215 (e.g., with respect to each of a plurality of differentaccesses to the media content by the plurality of different endpointdevices). In one example, the notifications may comprise blockchaintransactions recorded in one or more blockchain records. The pluralityof notifications may be received from the respective endpoint devices,from network edge servers forwarding the media content to respectiveendpoint devices, and/or from one or more devices in a blockchainnetwork that create blockchain records.

At step 245, the processing system records the accessing of the mediacontent by the plurality of endpoint devices. For instance, step 245 maycomprise the same or similar operations as described above in connectionwith step 220 (e.g., with respect to each of a plurality of differentaccesses to the media content by the plurality of different endpointdevices). In one example, the recording may include entering receivedblockchain records in a blockchain ledger. In one example, theprocessing system may also create or update database records relating tothe media content and/or accounts associated with the respectiveendpoint devices.

At step 250, the processing system may optionally determine that anumber of the plurality of endpoint devices accessing the media contenthas reached a threshold. For instance, the processing system may track anumber of accesses of a same copy of a media content for possiblepiracy, e.g., non-permitted file sharing. The threshold may comprise 10accesses, 20 accesses, 50 accesses, etc.

At step 255, the processing system identifies the media content as apirated copy, when it is determined that the number of the plurality ofendpoint devices accessing the media content has reached the threshold.For instance, when a number of accesses of the particular version of themedia content exceeds 10 accesses, 20 accesses, 50 accesses, etc., theparticular version of the media content may be identified as a potentialpiracy source.

At step 260, the processing system may optionally identify the at leastone endpoint device that is authorized to access the media content as apotential originator of the pirated copy. In particular, the first copyof the watermark (as well as the additional copies of the watermark) andone or more database records may indicate that a second endpoint devicewas an intended recipient of the media content. However, the pluralityof other endpoint devices may all be accessing the same copy of themedia content. Thus, the second endpoint device may be identified as apotential piracy source, either by virtue of the user of the secondendpoint device having uploaded the media content to a file sharingserver, by the second endpoint device having been stolen or hacked, andso forth.

Following step 260, the method 200 proceeds to step 295 where the methodends.

In addition, although not expressly specified above, one or more stepsof the method 200 may include a storing, displaying and/or outputtingstep as required for a particular application. In other words, any data,records, fields, and/or intermediate results discussed in the method canbe stored, displayed and/or outputted to another device as required fora particular application. Furthermore, operations, steps, or blocks inFIG. 2 that recite a determining operation or involve a decision do notnecessarily require that both branches of the determining operation bepracticed. In other words, one of the branches of the determiningoperation can be deemed as an optional step. Furthermore, operations,steps or blocks of the above described method(s) can be combined,separated, and/or performed in a different order from that describedabove, without departing from the example embodiments of the presentdisclosure.

FIG. 3 depicts a high-level block diagram of a computing device orprocessing system specifically programmed to perform the functionsdescribed herein. For example, any one or more components or devicesillustrated in FIG. 1 or described in connection with the method 200 maybe implemented as the system 300. As depicted in FIG. 3, the processingsystem 300 comprises one or more hardware processor elements 302 (e.g.,a central processing unit (CPU), a microprocessor, or a multi-coreprocessor), a memory 304 (e.g., random access memory (RAM) and/or readonly memory (ROM)), a module 305 for tracking an accessing of a mediacontent via a watermark embedded by a network node, and variousinput/output devices 306 (e.g., storage devices, including but notlimited to, a tape drive, a floppy drive, a hard disk drive or a compactdisk drive, a receiver, a transmitter, a speaker, a display, a speechsynthesizer, an output port, an input port and a user input device (suchas a keyboard, a keypad, a mouse, a microphone and the like)). Inaccordance with the present disclosure input/output devices 306 may alsoinclude antenna elements, transceivers, power units, and so forth.Although only one processor element is shown, it should be noted thatthe computing device may employ a plurality of processor elements.Furthermore, although only one computing device is shown in the figure,if the method 200 as discussed above is implemented in a distributed orparallel manner for a particular illustrative example, i.e., the stepsof the above method 200, or the entire method 200 implemented acrossmultiple or parallel computing devices, e.g., a processing system, thenthe computing device of this figure is intended to represent each ofthose multiple computing devices.

Furthermore, one or more hardware processors can be utilized insupporting a virtualized or shared computing environment. Thevirtualized computing environment may support one or more virtualmachines representing computers, servers, or other computing devices. Insuch virtualized virtual machines, hardware components such as hardwareprocessors and computer-readable storage devices may be virtualized orlogically represented. The hardware processor 302 can also be configuredor programmed to cause other devices to perform one or more operationsas discussed above. In other words, the hardware processor 302 may servethe function of a central controller directing other devices to performthe one or more operations as discussed above.

It should be noted that the present disclosure can be implemented insoftware and/or in a combination of software and hardware, e.g., usingapplication specific integrated circuits (ASIC), a programmable gatearray (PGA) including a Field PGA, or a state machine deployed on ahardware device, a computing device or any other hardware equivalents,e.g., computer readable instructions pertaining to the method discussedabove can be used to configure a hardware processor to perform thesteps, functions and/or operations of the above disclosed method 200. Inone example, instructions and data for the present module or process 305for tracking an accessing of a media content via a watermark embedded bya network node (e.g., a software program comprising computer-executableinstructions) can be loaded into memory 304 and executed by hardwareprocessor element 302 to implement the steps, functions, or operationsas discussed above in connection with the illustrative method 200.Furthermore, when a hardware processor executes instructions to perform“operations,” this could include the hardware processor performing theoperations directly and/or facilitating, directing, or cooperating withanother hardware device or component (e.g., a co-processor and the like)to perform the operations.

The processor executing the computer readable or software instructionsrelating to the above described method can be perceived as a programmedprocessor or a specialized processor. As such, the present module 305for tracking an accessing of a media content via a watermark embedded bya network node (including associated data structures) of the presentdisclosure can be stored on a tangible or physical (broadlynon-transitory) computer-readable storage device or medium, e.g.,volatile memory, non-volatile memory, ROM memory, RAM memory, magneticor optical drive, device or diskette, and the like. Furthermore, a“tangible” computer-readable storage device or medium comprises aphysical device, a hardware device, or a device that is discernible bythe touch. More specifically, the computer-readable storage device maycomprise any physical devices that provide the ability to storeinformation such as data and/or instructions to be accessed by aprocessor or a computing device such as a computer or an applicationserver.

While various examples have been described above, it should beunderstood that they have been presented by way of illustration only,and not a limitation. Thus, the breadth and scope of any aspect of thepresent disclosure should not be limited by any of the above-describedexamples, but should be defined only in accordance with the followingclaims and their equivalents.

What is claimed is:
 1. A method comprising: receiving, by a processingsystem including at least one processor, from a first network node, afirst copy of a watermark, wherein the watermark is embedded by thefirst network node in a media content; receiving, by the processingsystem, a notification comprising a second copy of the watermark and anidentification of a first endpoint device, wherein the notification isassociated with an accessing of the media content by the first endpointdevice, wherein the watermark is one of a plurality of watermarks in thenotification, wherein each of the plurality of watermarks is embedded inthe media content by one of: a distributor of the media content or oneof a plurality of network nodes in a distribution pipeline of the mediacontent, wherein the plurality of network nodes includes the firstnetwork node, and wherein each respective watermark of the plurality ofwatermarks identifies one of: the distributor of the media content orthe one of the plurality of network nodes in the distribution pipelineof the media content that inserted the each respective watermark;determining, by the processing system, in response to receiving thenotification, that the first endpoint device is not authorized to accessthe media content; recording, by the processing system, a charge to anaccount associated with the first endpoint device; granting, by theprocessing system, an authorization to the first endpoint device toaccess the media content; and recording, by the processing system, theaccessing of the media content by the first endpoint device, wherein therecording records that the media content that is accessed by the firstendpoint device was distributed via the distribution pipeline of themedia content.
 2. The method of claim 1, wherein the watermarkidentifies the first network node.
 3. The method of claim 1, wherein thewatermark further identifies at least one endpoint device that isauthorized to access the media content.
 4. The method of claim 1,wherein the watermark is embedded in an encoding of the media content.5. The method of claim 1, wherein each of the plurality of watermarks isassociated with a permission to access the media content.
 6. The methodof claim 1, wherein the notification further includes a time stamp. 7.The method of claim 1, further comprising: receiving a plurality ofnotifications comprising additional copies of the watermark andidentifications of a plurality of endpoint devices, wherein theplurality of notifications is associated with an accessing of the mediacontent by the plurality of endpoint devices; and recording theaccessing of the media content by the plurality of endpoint devices. 8.The method of claim 7, wherein the watermark further identifies at leastone endpoint device that is authorized to access the media content. 9.The method of claim 8, further comprising: determining that a number ofthe plurality of endpoint devices accessing the media content hasreached a threshold; identifying the media content as a pirated copy,when it is determined that the number of the plurality of endpointdevices accessing the media content has reached the threshold; andidentifying the at least one endpoint device that is authorized toaccess the media content as a potential originator of the pirated copy.10. The method of claim 1, wherein the watermark is shared as ablockchain record with a plurality of devices in a blockchain network,wherein the blockchain network includes the processing system and thefirst network node.
 11. The method of claim 10, wherein the watermark iswritten to a blockchain block via the blockchain network, wherein theblockchain block is stored by the plurality of devices in the blockchainnetwork in a plurality of blockchain ledgers.
 12. The method of claim10, wherein the notification comprising the second copy of the watermarkand the identification of the first endpoint device is received as ablockchain record from at least one of: the first endpoint device; thefirst network node; or a second network node.
 13. The method of claim12, wherein the blockchain network further includes the first endpointdevice.
 14. A non-transitory computer-readable medium storinginstructions which, when executed by a processing system including atleast one processor, cause the processing system to perform operations,the operations comprising: receiving, from a first network node, a firstcopy of a watermark, wherein the watermark is embedded by the firstnetwork node in a media content; receiving a notification comprising asecond copy of the watermark and an identification of a first endpointdevice, wherein the notification is associated with an accessing of themedia content by the first endpoint device, wherein the watermark is oneof a plurality of watermarks in the notification, wherein each of theplurality of watermarks is embedded in the media content by one of: adistributor of the media content or one of a plurality of network nodesin a distribution pipeline of the media content, wherein the pluralityof network nodes includes the first network node, and wherein eachrespective watermark of the plurality of watermarks identifies one of:the distributor of the media content or the one of the plurality ofnetwork nodes in the distribution pipeline of the media content thatinserted the each respective watermark; determining, in response toreceiving the notification, that the first endpoint device is notauthorized to access the media content; recording a charge to an accountassociated with the first endpoint device; granting an authorization tothe first endpoint device to access the media content; and recording theaccessing of the media content by the first endpoint device, wherein therecording records that the media content that is accessed by the firstendpoint device was distributed via the distribution pipeline of themedia content.
 15. A device comprising: a processing system including atleast one hardware processor; and a computer-readable medium storinginstructions which, when executed by the processing system, cause theprocessing system to perform operations, the operations comprising:receiving, from a first network node, a first copy of a watermark,wherein the watermark is embedded by the first network node in a mediacontent; receiving a notification comprising a second copy of thewatermark and an identification of a first endpoint device, wherein thenotification is associated with an accessing of the media content by thefirst endpoint device, wherein the watermark is one of a plurality ofwatermarks in the notification, wherein each of the plurality ofwatermarks is embedded in the media content by one of: a distributor ofthe media content or one of a plurality of network nodes in adistribution pipeline of the media content, wherein the plurality ofnetwork nodes includes the first network node, and wherein eachrespective watermark of the plurality of watermarks identifies one of:the distributor of the media content or the one of the plurality ofnetwork nodes in the distribution pipeline of the media content thatinserted the each respective watermark; determining, in response toreceiving the notification, that the first endpoint device is notauthorized to access the media content; recording a charge to an accountassociated with the first endpoint device; granting an authorization tothe first endpoint device to access the media content; and recording theaccessing of the media content by the first endpoint device, wherein therecording records that the media content that is accessed by the firstendpoint device was distributed via the distribution pipeline of themedia content.
 16. The device of claim 15, wherein the watermarkidentifies the first network node.
 17. The device of claim 15, whereinthe watermark further identifies at least one endpoint device that isauthorized to access the media content.
 18. The device of claim 15,wherein the watermark is embedded in an encoding of the media content.19. The device of claim 15, wherein each of the plurality of watermarksis associated with a permission to access the media content.
 20. Thedevice of claim 15, wherein the notification further includes a timestamp.